A few days ago I got an email from a hacker supposedly using an email of mine (he was using the same email address TO and FROM) from my own email domain, and had a part of a password I use to purchase items with this particular email but not the one associated with the email server at HostGator, and threatening me with bogus claims and demanding a ransom.

I used haveibeenpwned and resulted in 7 sites (i.e. Linkedin hacks) and 1 paste. I read your sites answers and Troy's info but do not understand how to proceed. I am a small biz man and not a coder.


This is a known scam. The scammers look up emails and cracked passwords in public leaks of site databases and then send an extortion email to people. The password is already out in the open, sorry. You should change the passwords on all sites using that password. On the up-side, this does mean that the person who is emailing you is not actually a hacker and does not have any malware on your system.

You should use a password manager to prevent this from being an issue in the future.

  • 14
    @GuillaumeBeauvois One free password manager, KeePass, is often considered the best. – forest Jan 10 '19 at 8:40
  • 7
    @GuillaumeBeauvois The free version of Lastpass is better than KeePass. I have been using both for 3 years in my laptop and office environment. – I am the Most Stupid Person Jan 10 '19 at 9:50
  • 5
    @IamtheMostStupidPerson There was a post here recently that hinted that LastPass may actually be handling security reports really poorly. I forget where that post is, but it's sufficient to be weary of it. – forest Jan 10 '19 at 9:51
  • 6
    @IamtheMostStupidPerson "better" in which sense? Easier to use, for sure, but surely not safer, since one is cloud-based and the other is not. – Federico Poloni Jan 10 '19 at 11:12
  • 2
    Just to add to that EFF also have an article on the scam – VLAZ Jan 10 '19 at 12:12

This is a scam attempt. Don't worry. Your password probably leaked somewhere (and you don't have different passwords for each service) and he is just trying to make you pay.

And forging the From: header on an email is as easy as writing a letter to someone writing a different sender name on the envelope.

  • 7
    Good answer! I'd add that he should change his password wherever he used the leaked one. – Anders Oct 5 '18 at 9:08

Especially last week I came across the similar phishing attack with different versions both for our clients and our employees. When I searched online I found these sources: emailscams and sextortion.

Basically, they are using leaked passwords and sending scam emails asking a ransom to pay. It would be safe to ignore this kind of emails and change your passwords if they exist in leaked websites.


I will follow the next steps:

  1. Don't pay to the guy, and don't respond to his emails
  2. Change the password from another different machine, probably yours is infected with something.
  3. Format your computer or install an AV to verify the existence of malware or key logger or other malicious activity.


  • 21
    This is not correct. This is a well-known and popular scam. OP's computer is not infected. – forest Jan 10 '19 at 8:33
  • 6
    @forest At least this isn't proof of that, aside from that, one never knows for sure^^ – Frank Hopkins Jan 10 '19 at 12:26
  • 2
    @forest Agreeing with Darkwing here; why would you state something so factually when you don't know? Sure it's a well-known and popular scam, but you don't whether OP's computer is infected with something. – user1717828 Jan 10 '19 at 12:34
  • 8
    @user1717828 Obviously there's always a chance that someone is infected with something, but it would be completely unrelated to this incident and isn't even worth bringing up. – forest Jan 10 '19 at 12:44

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.